Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
File: siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json)
Hash identifier: 4AA87ApijT0msizV/DfDvbkhiKQblgwGDhspdpQRS10=
Subject key identifier: 43:38:A0:5C:AE:5C:D4:6C:6C:06:F2:27:B8:FD:D4:82:4D:BE:D2:51
Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
Certificate issuer: /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Certificate serial: 019A71B947DA4C94021FA4E9D7A76269B818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: uPBoKdW8nYztiD2/KtSaMuFMDcvR5pjQCaeebFhQ9EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:47:da:4c:94:02:1f:a4:e9:d7:a7:62:69:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=4338a05cae5cd46c6c06f227b8fdd4824dbed251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:c5:b5:e0:9d:da:35:6b:bb:d2:25:e6:28:
53:85:89:3f:07:96:25:d5:e6:4a:75:dc:5e:f8:4c:
81:1f:19:0e:28:a7:41:8c:44:2b:24:5b:81:53:1a:
87:4c:c5:72:15:9c:a4:43:27:0b:43:ac:49:75:18:
2a:45:06:dd:3e:34:bc:6b:ad:d2:67:29:af:96:0b:
f1:f9:97:a8:34:dc:12:77:e2:ea:cd:a5:00:f8:ec:
40:7f:f4:80:d4:88:80:a2:9b:8e:7e:f6:d8:87:72:
d4:22:12:a0:7b:3a:f5:80:91:bf:aa:8d:78:0b:6d:
a6:d5:36:db:e3:75:0b:46:38:41:ee:0d:ba:d9:d1:
a8:36:f2:5f:ea:25:dc:b5:ff:3b:05:0a:09:c9:38:
b8:b1:bc:fb:3e:60:c0:42:97:fa:59:7e:b6:9c:90:
aa:7d:59:21:a6:31:44:2a:41:e5:df:ad:5a:b6:e3:
ad:4c:f4:02:43:f7:bc:77:36:db:48:1f:b8:ca:bd:
01:48:c1:97:3d:95:d1:2b:75:7c:c1:e4:23:6f:5b:
7d:77:e8:6a:5e:1a:ee:61:fc:c6:b3:65:b4:a1:00:
61:3f:8a:7d:f9:65:27:fd:cd:22:df:2f:a6:30:80:
d0:8e:b6:c6:ef:dc:47:21:60:69:5b:0d:74:ac:af:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:A0:5C:AE:5C:D4:6C:6C:06:F2:27:B8:FD:D4:82:4D:BE:D2:51
X509v3 Authority Key Identifier:
keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c2:31:30:4f:4e:dd:2a:19:39:0d:25:25:0f:47:38:46:90:
46:c0:dd:e1:f3:bb:5d:38:d0:17:e4:68:41:d6:1f:af:41:2a:
72:99:62:d1:9c:8f:88:c2:ac:9f:ec:eb:bd:d9:5f:59:d9:ab:
7c:8f:29:f3:b1:48:90:f7:e2:67:0a:eb:44:42:35:20:c4:da:
ab:cd:cb:0d:39:52:0b:5a:59:b3:2f:f0:df:99:62:b2:9a:7d:
f6:a3:c0:9e:40:41:b4:35:86:c5:d4:ce:f8:e1:13:92:6f:d4:
eb:df:d2:e8:20:ac:34:b6:e7:5b:e2:b6:db:59:5e:e3:c0:80:
6d:e6:46:7b:84:56:1e:70:d8:32:50:72:3b:0c:e9:d7:34:b6:
b4:bc:3f:58:57:79:b7:71:5b:49:d1:1f:36:ec:87:68:6e:4f:
36:d5:65:52:e0:0c:25:68:a6:ef:fd:d9:62:7b:c8:df:2b:96:
29:48:0c:05:5e:bd:91:14:b7:a5:41:ca:f5:80:2e:9a:a6:f5:
4c:ea:69:66:4f:12:84:df:5d:13:1b:10:0b:7d:d2:31:c9:95:
92:5f:4e:d6:c1:b1:cd:c5:9d:43:af:fe:e7:94:8b:f9:6b:1f:
e3:d8:a5:2f:6d:07:47:b7:cb:8a:49:b0:1e:a3:2b:e5:b0:4a:
7f:63:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client